Privacy Policy
1. What we collect
Account data (email address, optional name), the compliance records you enter or upload (container registries, inspections, photos, findings, training and spill logs), and minimal technical data needed to operate the service (session cookies, error diagnostics).
2. What we do not do
We do not sell your data. We do not use your compliance records for advertising.
3. Processors
The service runs on managed infrastructure (application hosting, PostgreSQL database with point-in-time recovery, object storage for photos and documents) and uses an email provider to deliver sign-in links and notifications, error monitoring, and privacy-friendly, cookieless analytics (aggregate usage only).
4. Retention and deletion
Records are retained while your account is active. Inspection records should be retained at least 3 years (40 CFR 112.7(e)); PlanKeep retains them until you delete them or close your account. You can export everything at any time; requested deletion is completed within 30 days.
5. Contact
Privacy requests: privacy@plankeep.example (placeholder; set the real domain before launch).